WPP is the trusted growth partner for the world’s leading brands. We unite cutting-edge media intelligence and data solutions, world-class creativity, next-generation production, transformative enterprise solutions and expert strategic counsel in a single company – powered by exceptional talent and our agentic marketing platform, WPP Open, to help our clients navigate change, capture opportunity and deliver transformational growth. We work with the world's most valuable brands and have global reach across 100+ markets, with deep local expertise. Our people are the key to our success. We're committed to fostering a culture of creativity, belonging and continuous learning, attracting and developing the brightest talent, and providing exciting career opportunities that help our people grow. For more information, visit WPP.com. Why we're hiring: The Threat Hunter is responsible for proactively identifying advanced threats that evade traditional security controls. This role involves hypothesis-driven investigations, leveraging threat intelligence, and analyzing telemetry across endpoints, networks, and cloud environments to uncover stealthy adversary activity. The Threat Hunter plays a critical role in reducing dwell time and strengthening organizational resilience under the Autonomic Security Operations model. What you'll be doing: Proactive Threat Hunting Execute hypothesis-driven hunts based on adversary TTPs and threat intelligence. Analyze telemetry from SIEM, EDR/XDR, NDR, and cloud-native platforms to identify anomalies. Develop and maintain hunting queries and scripts for automation and repeatability. Validate detection coverage through purple team exercises and adversary emulation. Threat Intelligence Integration Incorporate emerging threat intelligence into hunting hypotheses and detection pipelines. Maintain awareness of global threat actor tactics, techniques, and procedures (MITRE ATT&CK). Continuous Improvem
Role overview
Job description
Threat Hunter / Purple Team Operator SIXGEN's mission is to deliver agile, mission-ready cybersecurity solutions that empower government and critical infrastructure organizations to stay ahead of advanced cyber threats. We combine innovation, deep expertise, and leading technical capabilities to uncover vulnerabilities, protect vital systems, and strengthen operational resilience. POSITION OVERVIEW Position: Mid-Level Threat Hunter / Purple Team Operator Job Type: Full Time Location: Remote with travel to customers and test locations as required Clearance Requirement: Active Top Secret with SCI eligibility Salary Range ; $115-$140K WHAT YOU'LL DO SIXGEN is seeking a mid-level Threat Hunter / Purple Team Operator to identify threats that evade existing detection methods, develop and test hunting hypotheses, and feed findings back into detection engineering. This role will combine remote
…What they are looking for
Skills & requirements
Qualification
3 – 5+ years of experience in threat hunting, SOC/detection engineering, incident response, or a closely related defensive security role. Hand-on experience working with a major SIEM and EDR platform. Working knowledge of the MITRE ATT&CK framework and how to map observed activity to adversary TTPs. Understanding of common adversary tradecraft and red team testing methodology to help close detection gaps. Strong written and verbal communication skills with the ability to produce clear, customer-facing findings and an “all clear” determination. Comfortable operating independently in remote, customer-facing roles. U.S. citizenship, with eligibility to obtain and maintain a U.S. government security clearance. Preferred
Department · Operations
Hiring company
SixGen, Inc.
SIXGEN supports cyber and intelligence missions by serving government and commercial organizations as they overcome global cybersecurity challenges. Our highly skilled operators conduct research and assessments based on real-world threats. We simulate adversaries and malicious actors to report details and actionable findings on critical assets and infrastructures. Our program planners advise mission owners to bring rapid solutions to intelligence mission leaders. Using innovative processes, tools, and techniques, we predict and overcome cybersecurity vulnerabilities. Our successes are supported by our diverse team of experienced, technical talent.
Related opportunities
Similar active roles
Relevant, currently active roles for this market.
$200K – $400K/yr
$190K – $275K/yr
$200K – $400K/yr
🔔 Get job alerts
New Threat Hunter/Purple Team Operator jobs in Remote, straight to your inbox.
No spam · Unsubscribe anytime